$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/LXoJ1jLRZPprWy-S6gZa2CnK3HM.roa File: LXoJ1jLRZPprWy-S6gZa2CnK3HM.roa (raw, json) Hash identifier: H1OSqqIXQ8L0e8zdTbz2Q5MNnYt8XB/ESxFOwFA6jVY= Subject key identifier: 2D:7A:09:D6:32:D1:64:FA:6B:5B:2F:92:EA:06:5A:D8:29:CA:DC:73 Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 11A5 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/LXoJ1jLRZPprWy-S6gZa2CnK3HM.roa Signing time: Fri 01 Sep 2023 10:20:08 +0000 ROA not before: Fri 01 Sep 2023 10:20:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131636 IP address blocks: 103.130.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4517 (0x11a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Sep 1 10:20:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2D7A09D632D164FA6B5B2F92EA065AD829CADC73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:03:fe:90:0a:60:ef:5d:62:41:f3:1c:a9: 14:7b:73:0a:3e:39:f7:64:0c:33:99:31:b1:90:66: 71:07:63:fe:e5:0b:29:83:10:ce:04:cd:97:af:2f: fd:b5:5b:a3:d0:16:56:c6:4d:c9:b4:f2:d9:2c:53: b1:3d:27:c8:22:9d:ba:e3:67:95:14:a3:59:c1:1a: 73:22:f9:ce:cc:ed:47:54:2e:92:c8:0c:17:9c:e4: 2d:73:ed:25:fd:5e:a8:b7:66:7a:3e:66:6c:3a:f0: 33:93:2a:f2:18:c7:01:a6:03:5c:87:6a:06:23:1c: 4e:23:64:9b:7a:db:e3:6c:cf:64:53:01:ba:22:86: c0:ac:30:43:5c:03:95:8b:f1:4d:c6:a2:fa:d1:92: 18:5a:95:b5:81:71:b2:8f:d6:19:e9:5a:d0:d5:e4: 45:4c:c3:15:5d:80:c5:1a:ea:ee:66:f4:b3:f4:2c: 1f:1a:cf:12:6d:0a:79:a2:9b:0f:d0:2e:71:6b:f9: c2:6c:14:40:d3:45:b8:a4:1f:4e:27:60:8b:f8:b8: 3a:78:b4:1d:e0:cb:8d:fb:76:0e:05:11:e5:0d:96: 92:cf:5b:66:d7:b6:63:d0:ab:be:c4:1d:70:71:c4: e4:c4:f9:20:70:e4:bf:3a:95:fd:8b:3a:d5:66:f5: 1d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7A:09:D6:32:D1:64:FA:6B:5B:2F:92:EA:06:5A:D8:29:CA:DC:73 X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/LXoJ1jLRZPprWy-S6gZa2CnK3HM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.124.0/22 Signature Algorithm: sha256WithRSAEncryption 45:81:df:fc:19:bf:0b:37:86:28:56:b4:88:a1:30:e8:11:3a: 59:56:b8:1e:b8:34:b6:c6:ed:a3:39:fc:b3:cd:56:00:06:eb: da:63:cc:0c:39:8b:84:cf:cd:10:c0:f5:8d:23:31:4b:27:a8: 81:bc:82:6b:fd:9d:16:11:cb:cd:db:ee:aa:dd:3b:d7:a3:e5: d9:82:52:90:ae:df:d3:b0:bc:1c:44:22:7a:00:25:1b:b4:16: 07:9f:df:c3:16:ca:ca:a8:a9:e0:f5:76:08:43:76:7b:bf:4d: dd:ec:6b:15:e9:a4:88:d2:20:af:76:bf:ec:78:96:07:01:26: c2:f0:0e:89:b6:72:49:8d:54:e5:3f:dc:68:78:da:ec:ac:92: b0:67:35:2e:77:50:4b:af:1d:e0:9c:bb:e1:03:27:aa:a8:b4: 74:72:78:3b:89:7a:d4:f6:4c:62:2d:5e:97:05:b4:5f:77:1c: 26:2f:e7:d2:36:3c:15:34:11:3f:b4:e4:0b:85:36:f8:d6:c1: 56:90:03:0e:8c:f3:5d:75:65:18:2e:07:3d:6a:8c:b2:73:72: 69:7f:38:9e:93:17:ba:f3:aa:9c:f2:72:a7:63:04:a0:40:c1: 9c:b2:e4:f7:5b:8f:35:c8:9e:6b:9e:19:13:41:f4:5c:e9:55: 61:77:5d:4e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yMzA5MDEx MDIwMDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJEN0EwOUQ2MzJEMTY0 RkE2QjVCMkY5MkVBMDY1QUQ4MjlDQURDNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxNgP+kApg711iQfMcqRR7cwo+OfdkDDOZMbGQZnEHY/7lCymD EM4EzZevL/21W6PQFlbGTcm08tksU7E9J8ginbrjZ5UUo1nBGnMi+c7M7UdULpLI DBec5C1z7SX9Xqi3Zno+Zmw68DOTKvIYxwGmA1yHagYjHE4jZJt62+Nsz2RTAboi hsCsMENcA5WL8U3GovrRkhhalbWBcbKP1hnpWtDV5EVMwxVdgMUa6u5m9LP0LB8a zxJtCnmimw/QLnFr+cJsFEDTRbikH04nYIv4uDp4tB3gy437dg4FEeUNlpLPW2bX tmPQq77EHXBxxOTE+SBw5L86lf2LOtVm9R1lAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQULXoJ1jLRZPprWy+S6gZa2CnK3HMwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi9MWG9KMWpMUlpQcHJXeS1TNmda YTJDbkszSE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4J8 MA0GCSqGSIb3DQEBCwUAA4IBAQBFgd/8Gb8LN4YoVrSIoTDoETpZVrgeuDS2xu2j OfyzzVYABuvaY8wMOYuEz80QwPWNIzFLJ6iBvIJr/Z0WEcvN2+6q3TvXo+XZglKQ rt/TsLwcRCJ6ACUbtBYHn9/DFsrKqKng9XYIQ3Z7v03d7GsV6aSI0iCvdr/seJYH ASbC8A6JtnJJjVTlP9xoeNrsrJKwZzUud1BLrx3gnLvhAyeqqLR0cng7iXrU9kxi LV6XBbRfdxwmL+fSNjwVNBE/tOQLhTb41sFWkAMOjPNddWUYLgc9aoyyc3Jpfzie kxe686qc8nKnYwSgQMGcsuT3W481yJ5rnhkTQfRc6VVhd11O -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org